$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft File: 9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json) Hash identifier: xjlBnQU8o0sUjaQIJHm5AWyrivhRGWm8Kb4q4DINut0= Subject key identifier: 98:7D:A7:C0:7A:4E:0B:E7:27:E6:7A:70:0C:59:63:A9:A2:72:9C:F1 Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A Certificate issuer: /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A Certificate serial: 016F Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft Manifest number: 015F Signing time: Sat 05 Apr 2025 03:34:27 +0000 Manifest this update: Sat 05 Apr 2025 03:34:26 +0000 Manifest next update: Sat 12 Apr 2025 03:34:26 +0000 Files and hashes: 1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: rQk9WoF35WJbubKWZuzxGqYXA/cWOErSI8iKHfObpkw=) 2: 5509870E6B6911EFA634B086C4F9AE02.roa (hash: asEJPU7qXLCzqaXYCgM2ewsC/Ljdl61VbAkeSxk2z2Y=) 3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: M0DuUC9dZlW1rJ9Ex1QdPrWmmcntHnV78typE7HBTbE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 367 (0x16f) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0E6A Validity Not Before: Apr 5 03:34:26 2025 GMT Not After : Apr 12 03:34:26 2025 GMT Subject: CN=67f0a4c3-2e12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ec:de:e5:66:ed:11:33:55:30:f7:19:1b:75: 0a:47:d3:fe:40:62:35:41:a0:a2:c1:38:a0:d9:a8: ea:db:ce:f1:f8:02:5d:c1:5c:4a:5e:1b:1d:0a:a2: c4:33:ee:32:71:7f:22:69:ea:d4:00:99:bb:82:7b: bc:9c:eb:b0:42:62:3a:ee:3a:aa:5e:20:f1:6a:2b: 71:4a:56:c2:25:79:24:47:7b:03:5d:7c:d8:a0:75: fc:08:0a:13:d8:cf:20:82:3c:0b:e1:26:52:37:79: ac:43:50:58:82:1a:c0:e9:d0:84:32:51:4f:68:96: 72:ee:42:3b:7d:15:70:56:b9:cd:29:c7:52:c0:67: 77:a6:b2:2f:55:92:62:8f:dd:2a:ca:bd:b6:bc:8d: 5f:f8:5a:35:c4:a9:17:e5:17:68:f8:05:0e:3d:bd: 17:b0:6e:dc:ba:ca:9f:cd:d6:e7:54:6f:36:d5:0e: fe:a8:59:ee:82:2b:e9:81:bb:22:b2:31:54:82:7d: 5a:26:a8:54:aa:c2:68:ed:02:c8:08:f9:78:48:e1: 52:9c:48:01:9f:1c:72:7e:a1:07:b6:b2:d7:29:b2: 8d:1c:4c:e7:7f:7b:c8:e4:3d:83:e1:9f:fe:8a:9b: 6e:34:18:7b:7a:31:3c:16:54:b0:8a:36:81:cf:b1: b9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:7D:A7:C0:7A:4E:0B:E7:27:E6:7A:70:0C:59:63:A9:A2:72:9C:F1 X509v3 Authority Key Identifier: keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 41:73:2f:2f:aa:c1:cd:9f:5f:be:93:5c:f8:ed:ea:11:07:0b: 53:19:07:51:74:53:21:58:9d:97:62:d0:50:c9:7f:17:e0:f3: 9f:ee:7a:89:d1:78:1f:f2:74:3b:72:c9:a8:1c:b5:43:3e:ab: 9c:93:93:64:da:3a:eb:53:7a:43:65:c0:b6:ca:99:3f:e0:a8: 20:50:e9:7c:3c:a7:89:52:dc:c0:68:66:57:54:5f:fa:f8:b2: e8:94:e6:47:12:a7:19:34:52:dd:64:57:e0:8b:6c:01:77:7e: b4:53:ac:d8:84:05:06:ba:a1:df:c9:8e:05:97:df:dd:aa:a0: 08:8c:84:65:0e:ee:82:92:85:2c:ff:69:1d:ea:39:b5:33:83: e3:91:e4:e0:18:2e:d6:94:ae:8c:94:a2:0a:fe:bb:3b:0b:3d: 3d:14:7f:8e:94:52:70:c2:4f:84:f8:9c:21:c3:2f:a5:58:f3: a3:65:e6:ef:ce:88:2f:3b:c2:2c:8a:77:62:06:a2:c7:4c:65: 4c:27:dd:75:f9:75:1b:2b:ab:d2:56:02:9f:34:a6:db:fa:3a: 73:b5:40:61:bb:c0:07:4d:5e:2f:23:cf:12:01:69:b9:3a:6d: 66:66:61:69:c1:21:69:d2:3a:bf:e4:50:56:97:c2:e0:be:38: 06:52:5d:cd -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAW8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBFNkExMTAvBgNVBAUTKEY1NDU5Q0JBMzFGOTMzRjkwNzNCNTE0QzlDQkJFQzM0 RjZFRDJFNEEwHhcNMjUwNDA1MDMzNDI2WhcNMjUwNDEyMDMzNDI2WjAYMRYwFAYD VQQDEw02N2YwYTRjMy0yZTEyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAs+ze5WbtETNVMPcZG3UKR9P+QGI1QaCiwTig2ajq287x+AJdwVxKXhsdCqLE M+4ycX8iaerUAJm7gnu8nOuwQmI67jqqXiDxaitxSlbCJXkkR3sDXXzYoHX8CAoT 2M8ggjwL4SZSN3msQ1BYghrA6dCEMlFPaJZy7kI7fRVwVrnNKcdSwGd3prIvVZJi j90qyr22vI1f+Fo1xKkX5Rdo+AUOPb0XsG7cusqfzdbnVG821Q7+qFnugivpgbsi sjFUgn1aJqhUqsJo7QLICPl4SOFSnEgBnxxyfqEHtrLXKbKNHEznf3vI5D2D4Z/+ iptuNBh7ejE8FlSwijaBz7G5SwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJh9p8B6 TgvnJ+Z6cAxZY6micpzxMB8GA1UdIwQYMBaAFPVFnLox+TP5BztRTJy77DT27S5K MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEU2QS80QzI4MUJCRTEx QTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1fa0hPMUZNbkx2c05QYnRM a28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzlVV2N1akg1TV9rSE8xRk1uTHZzTlBidExrby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEU2QS80QzI4MUJCRTExQTYxMUVFQjMzNDY5MjZDNEY5QUUwMi85VVdjdWpINU1f a0hPMUZNbkx2c05QYnRMa28ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBBcy8vqsHNn1++k1z47eoRBwtTGQdRdFMhWJ2XYtBQyX8X4POf7nqJ 0Xgf8nQ7csmoHLVDPquck5Nk2jrrU3pDZcC2ypk/4KggUOl8PKeJUtzAaGZXVF/6 +LLolOZHEqcZNFLdZFfgi2wBd360U6zYhAUGuqHfyY4Fl9/dqqAIjIRlDu6CkoUs /2kd6jm1M4PjkeTgGC7WlK6MlKIK/rs7Cz09FH+OlFJwwk+E+Jwhwy+lWPOjZebv zogvO8IsindiBqLHTGVMJ911+XUbK6vSVgKfNKbb+jpztUBhu8AHTV4vI88SAWm5 Om1mZmFpwSFp0jq/5FBWl8LgvjgGUl3N -----END CERTIFICATE-----Generated at Sat Apr 5 21:55:41 2025 by rpki-client